Blog topic
Auditing permissions, exposure, and org configuration.
Setup deactivates one user at a time, and the 'You cannot deactivate this user' error stops you halfway. Here is a safe order for offboarding many users at once: freeze, clear the blockers, deactivate in bulk, then reassign what they owned.
A low Health Check grade is one of the first things an auditor or new admin notices. Here is how the score is calculated, the high-risk settings that move it most, a safe order to fix them, and what the score does not check.
On 20 February 2027 Salesforce stops supporting the OAuth username-password flow, and the user-agent flows go the same day. Here is how to find every integration that still uses them, and what to move each one to.
Salesforce announced an AI agent that attacks your org like a real intruder. It has no release date or price yet. Here is what it will do, what it will not, and how to test your org in the meantime.
Salesforce has cancelled the plan to retire permissions on profiles, but its advice has not changed. What stays on profiles, how permission set groups and muting fit, and a migration plan that does not break anyone's access.
Winter '27 turns on Profile Filtering by default and starts closing old API doors. Most of it is good security. Here is what breaks if you do not prepare, and how to check your org.
An annual security review is a snapshot of a moving org. Use this practical cadence for privileged access, configuration, external users and full audits.
Health Check gives you a score out of 100 and almost no idea what to do next. Here is the fourteen-area sweep that actually surfaces risk.
By topic